yudao-cloud
YunaiV- Product type
- Software application
- Catalog vulnerabilities
- 11
Severity across 11 analyzed records
Verify to analyze this security profile
en
Severity across 11 analyzed records
Verify to analyze this security profile
As of 10/02/2026, within CyStack's analyzed data, yudao-cloud has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of yudao-cloud and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-58448yudao-cloud < 2026.06 - BPM Module Broken Access Control via process-instance API | Exploitation statusPublic exploit | FixYes | Published06/30/2026 | SeverityHigh |
CVE-2026-9464YunaiV yudao-cloud Admin API Endpoint create IotDataSinkHttpConfig server-side request forgery | Exploitation statusPublic exploit | FixNot confirmed | Published05/25/2026 | SeverityMedium |
CVE-2026-7710YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication | Exploitation statusPublic exploit | FixNot confirmed | Published05/03/2026 | SeverityMedium |
CVE-2026-7679YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken improper authentication | Exploitation statusPublic exploit | FixNot confirmed | Published05/03/2026 | SeverityMedium |
CVE-2026-7678YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published05/03/2026 | SeverityMedium |
CVE-2026-5148YunaiV yudao-cloud page sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published03/30/2026 | SeverityMedium |
CVE-2026-5147YunaiV yudao-cloud get-by-website sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published03/30/2026 | SeverityMedium |
CVE-2025-15098YunaiV yudao-cloud Business Process Management BpmSyncHttpRequestTrigger server-side request forgery | Exploitation statusPublic exploit | FixNot confirmed | Published12/26/2025 | SeverityMedium |
CVE-2025-10987YunaiV yudao-cloud HTTP Request transfer improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Published09/26/2025 | SeverityMedium |
CVE-2025-10277YunaiV yudao-cloud submit improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Published09/12/2025 | SeverityMedium |
CVE-2025-10275YunaiV yudao-cloud transfer improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Published09/12/2025 | SeverityMedium |